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We evaluated the Department of Homeland Security (DHS) and its organizational 
components' security programs at Dulles International Airport. Specifically, we assessed 
the strengths and weaknesses of security controls over DHS information technology 
assets at this airport. Our objective was to determine whether the DHS components at the 
airport complied with the department's technical and information security policies and 
procedures. This evaluation included onsite verification and validation of operational 
security controls, evaluation of technical security controls implemented on information 
technology devices, and also reviews of applicable DHS policies, procedures, and other 
appropriate documentation. 

We briefed the DHS Chief Information Security Officer and DHS components on the 
results of our evaluation. We also made nine recommendations to improve information 
technology security at Dulles International Airport. DHS concurred with our 
recommendations and directed the components to address the findings. 
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